Diagnostics

Metrics

http

A CAA record was discovered. A CAA record is used to specify which certificate authorities (CAs) are allowed to issue certificates for a domain.

CAA Record

Allowed Options Method

Setting the XSS-Protection header is deprecated. Setting the header to anything other than `0` can actually introduce an XSS vulnerability.

XSS-Protection Header - Cross-Site Scripting

Some Apache servers have the version on the response header. The OpenSSL version can be also obtained

Apache Detection

Wappalyzer Technology Detection

This template searches for missing HTTP security headers. The impact of these missing headers can vary.


HTTP Missing Security Headers

Checks if external script and stylesheet tags in the HTML response are missing the Subresource Integrity (SRI) attribute.


Missing Subresource Integrity

WAF Detection

Extract the issuer's organization from the target's certificate. Issuers are entities which sign and distribute certificates.


Detect SSL Certificate Issuer

Extract the Subject Alternative Name (SAN) from the target's certificate. SAN facilitates the usage of additional hostnames with the same certificate.


SSL DNS Names

A root certificate is a digital certificate issued by a trusted certificate authority that acts as a basis for other digital certificates. An untrusted root certificate is a certificate that is issued by an authority that is not trusted by the computer, and therefore cannot be used to authenticate websites or other digital certificates.


Untrusted Root Certificate - Detect

TLS version detection is a security process used to determine the version of the Transport Layer Security (TLS) protocol used by a computer or server.
It is important to detect the TLS version in order to ensure secure communication between two computers or servers.


TLS Version - Detect

Elasticsearch is a search engine based on the Lucene library. It provides a distributed, multitenant-capable full-text search engine with an HTTP web interface and schema-free JSON documents.

Elasticsearch

TypeScript is an open-source language which builds on JavaScript  by adding static type definitions.

TypeScript

Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.

Bootstrap

Zone.js

Angular is a TypeScript-based open-source web application framework led by the Angular Team at Google.

Angular

Apache is a free and open-source cross-platform web server software.

Apache HTTP Server

Typekit is an online service which offers a subscription library of fonts.

Typekit

jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.

jQuery

Elastic APM offers free and open application performance monitoring.

Elastic APM

Unpkg is a content delivery network for everything on npm.

Unpkg

Font Awesome is a font and icon toolkit based on CSS and Less.

Font Awesome

HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.

HSTS

Webpack is an open-source JavaScript module bundler.

Webpack

Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.

type	url	details
unknown	use.typekit.net/jjx2ksb.c...
bootstrapcdn	maxcdn.bootstrapcdn.com/f...	Host files locally
unpkg	unpkg.com/ngx-bootstrap/d...	Host files locally
unknown	p.typekit.net/p.css?s=1&k...
unpkg	unpkg.com/ngx-bootstrap@1...	Host files locally
unknown	use.typekit.net/af/9b05f3...
unknown	use.typekit.net/af/9b05f3...
unknown	use.typekit.net/af/c4c302...
unknown	use.typekit.net/af/053fc9...
unknown	use.typekit.net/af/2cd6bf...
unknown	use.typekit.net/af/c4c302...
unknown	use.typekit.net/af/053fc9...
unknown	use.typekit.net/af/2cd6bf...

flag	country	hostname	ip	city
	France	ma-cps.esante.gouv.fr	80.78.2.155	?
	États Unis	use.typekit.net	23.54.76.10	?
	?	maxcdn.bootstrapcdn.com	104.18.10.207	?
	?	unpkg.com	104.17.248.203	?
	États Unis	p.typekit.net	23.54.76.49	?

https://ma-cps.esante.gouv.fr

LightHouse

https://ma-cps.esante.gouv.fr/6 jours

Système de design de l'état

Eco-index

GES: 1.46 gramme(s) par visite

Eau : 2.19 cl par visite

Ça veut dire quoi ?

Cookies6 jours

Scripts tiers6 jours

Déclaration de mise en accessibilité

Conformité partielle